last executing test programs: 5m40.582381168s ago: executing program 3 (id=9207): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 5m40.29476014s ago: executing program 3 (id=9209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400fc0100000000000000000000000000000c00028005000100000000003c0001800c00028005000100000000002c00018014000300fe00000000000000000000000000003c1400040000000000000000000000ffffac1414bb08000740000000013c000e802c000180140003"], 0xd0}}, 0x44800) 5m39.907374667s ago: executing program 3 (id=9213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000670000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbddaf686c4f64d26b42e7d613e42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c310"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="5aaee84c47ff946898c617ee41de", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m39.493550034s ago: executing program 3 (id=9216): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m39.152359229s ago: executing program 3 (id=9220): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0xfffffffffffffe2a) 5m38.552229285s ago: executing program 3 (id=9231): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'ni_labpc\x00', [0x5, 0xe6d2, 0x0, 0xb65, 0x6, 0x4, 0x1, 0x4, 0x200, 0x5, 0x3ff, 0x100, 0x8, 0x7f, 0x3ff, 0x8, 0x9, 0x4, 0x2, 0x4, 0x401, 0xfff, 0x0, 0xca, 0x6, 0x401, 0x2, 0x81, 0x7, 0x7f96c1a4, 0xb, 0xabc9]}) 5m38.145496173s ago: executing program 32 (id=9231): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'ni_labpc\x00', [0x5, 0xe6d2, 0x0, 0xb65, 0x6, 0x4, 0x1, 0x4, 0x200, 0x5, 0x3ff, 0x100, 0x8, 0x7f, 0x3ff, 0x8, 0x9, 0x4, 0x2, 0x4, 0x401, 0xfff, 0x0, 0xca, 0x6, 0x401, 0x2, 0x81, 0x7, 0x7f96c1a4, 0xb, 0xabc9]}) 2.295406341s ago: executing program 4 (id=13840): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 2.108367939s ago: executing program 4 (id=13844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa000009"], 0xac}}, 0x0) 1.865344249s ago: executing program 1 (id=13848): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.862020319s ago: executing program 4 (id=13849): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x4, 0x7, 0x2, 0xed, "4a9b02", 0x5}}) 1.828356291s ago: executing program 2 (id=13850): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x3}}, @nl=@kern={0x10, 0x0, 0x0, 0x40000}, @can, 0xf3, 0x0, 0x0, 0x0, 0xfc00, 0x0, 0x6, 0x1, 0x800}) 1.684239927s ago: executing program 4 (id=13852): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f00000006c0)="$eJzskrGO00AQhr+1neRAxwkkqmvuipOAAuL4ANFxZejpaLASEyIcIHEkSJTCCKEUFIiSJ8hrIPECUCAeIHWKiBoZ7e7YcsIjsF+xf+bf2dmdiZ9n46wF/Nkuelxg8Dnih1IEwImy3saz+ln0p+gnK3yXvEfivxc9zmbzpuSccs0aL+I0TSanwG/jVVb28J3HxpT6JYeeAkVRFODRB53OYZmzXfR8YFzlwHEA100TRZWjG9HBDaA9Hb1uZ7P57eEoHiSD5GXkn98P74bhvaj9bJgmoV1V7QppBa23gNaBGPGh2W8AH8S6zC6q9jTZV5d4Qlm7Wc7wSLGPVztbquJr9a4W5f8Fjy9AP+tNrmrumakSYFrqovAl6AS199m7DszGnd6rtL9EocpjK4KqRmdNowqienD+IOeKLbWUkmeiXdGV6Fr0ZO+TCXK9fpToZg5N3sbT6aSjh2R/NeTsJKq86GpeH5i+9Yu329w375/ZOhwOh8PhcDgcDsf/xt8AAAD//4Yhcvw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.653387788s ago: executing program 1 (id=13853): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2100) ioctl$I2C_SLAVE(r0, 0x703, 0x60) 1.617226499s ago: executing program 2 (id=13855): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0xa) 1.433127448s ago: executing program 2 (id=13857): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) fadvise64(r0, 0x4, 0x9, 0x4) 1.414842499s ago: executing program 1 (id=13858): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xe, 0x0, 0x0) 1.37157366s ago: executing program 4 (id=13859): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 1.250518965s ago: executing program 2 (id=13860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xf}, 0xbf00}) 1.233925416s ago: executing program 1 (id=13861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@getae={0x4c, 0x1f, 0xd05, 0x70bd27, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xa, 0x6c}, @in=@remote, 0xbef9, 0x3504}, [@mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000020}, 0x4810) 1.182070469s ago: executing program 4 (id=13862): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102e0d703010902bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c0900030424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.060686544s ago: executing program 2 (id=13864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 1.042541725s ago: executing program 1 (id=13865): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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") statx(0xffffffffffffff9c, &(0x7f0000008380)='./file1\x00', 0x800, 0x10, &(0x7f0000000000)) 918.59929ms ago: executing program 2 (id=13867): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000100)=0xfffffffc, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000480), 0x0) 715.973259ms ago: executing program 1 (id=13869): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5fcf, &(0x7f0000003100)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) 613.325903ms ago: executing program 0 (id=13871): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 474.909339ms ago: executing program 0 (id=13872): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0xf0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[], 0xfd}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 348.344775ms ago: executing program 0 (id=13873): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 243.043829ms ago: executing program 0 (id=13874): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9) 149.394763ms ago: executing program 0 (id=13875): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0x17c4) 0s ago: executing program 0 (id=13876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): t=2, SerialNumber=3 [ 1474.649621][T32582] usb 1-1: Product: syz [ 1474.653906][T32582] usb 1-1: Manufacturer: syz [ 1474.669472][T32582] usb 1-1: SerialNumber: syz [ 1474.692280][T32582] usb 1-1: config 0 descriptor?? [ 1474.713479][T32582] usb 1-1: bad CDC descriptors [ 1474.718676][T32583] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1474.728756][T32582] usb 1-1: unsupported MDLM descriptors [ 1474.812040][ T706] loop2: detected capacity change from 0 to 32768 [ 1474.841222][ T706] JBD2: Ignoring recovery information on journal [ 1474.885746][ T706] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1474.957276][T32583] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.985030][T32583] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1475.007747][T32583] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1475.016895][T32583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1475.017299][ T789] usb 1-1: USB disconnect, device number 74 [ 1475.039726][T32583] usb 5-1: SerialNumber: syz [ 1475.053846][ T722] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1475.076348][ T722] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 1475.092970][ T5868] ocfs2: Unmounting device (7,2) on (node local) [ 1475.099460][ T722] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 1475.298547][T32583] usb 5-1: 0:2 : does not exist [ 1475.311156][T32583] usb 5-1: unit 5: unexpected type 0x03 [ 1475.354398][T32583] usb 5-1: USB disconnect, device number 11 [ 1475.435545][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1475.497947][ T728] Cannot find del_set index 2 as target [ 1475.584272][ T730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11720'. [ 1475.587830][ T732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11721'. [ 1475.605811][ T732] netlink: 'syz.2.11721': attribute type 8 has an invalid length. [ 1475.613848][ T732] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1476.444033][ T762] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1476.570119][ T766] loop2: detected capacity change from 0 to 2048 [ 1476.643864][ T771] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1476.889552][ T771] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1476.925537][ T771] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1476.998141][ T771] Remounting filesystem read-only [ 1477.024497][T27543] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1477.031779][T27543] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1477.074315][T27543] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.110104][T27543] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.119124][T27543] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.155611][T27543] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 1477.184811][T27543] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 1477.228796][T27543] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.243048][T27543] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.253257][T27543] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.270654][ T5868] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1477.294220][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1477.305583][ T5868] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1477.316571][ T5868] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 1477.335039][ T5868] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 1477.357212][ T5868] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1477.391563][ T5868] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1477.429215][ T5868] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1477.449405][ T5868] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1477.476452][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.496828][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.510771][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.531025][ T5868] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1477.543242][ T5868] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1477.561593][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.581933][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.597779][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.618284][ T5868] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1477.636337][ T5868] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1477.651711][ T5868] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1477.662493][ T5868] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1477.669882][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.700955][ T5868] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 1477.711886][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.731844][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.749189][ T5868] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 1477.749335][ T789] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1477.767940][ T5868] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1477.849270][ T792] loop1: detected capacity change from 0 to 32768 [ 1477.862551][ T792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.11748 (792) [ 1477.917383][ T792] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1477.953439][ T792] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1477.981220][ T792] BTRFS info (device loop1): using free space tree [ 1477.994162][ T789] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1478.024716][ T789] usb 1-1: config 179 has no interface number 0 [ 1478.041956][ T789] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1478.086374][ T789] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1478.112800][ T789] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1478.140091][ T789] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1478.161312][ T789] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1478.183523][ T789] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1478.194152][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.206752][ T797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1478.214098][ T797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1478.221418][ T792] BTRFS info (device loop1): enabling ssd optimizations [ 1478.252818][ T792] BTRFS info (device loop1): auto enabling async discard [ 1478.455222][ T799] loop4: detected capacity change from 0 to 32768 [ 1478.517847][ T5866] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1478.597662][ T799] [ 1478.597662][ T799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1478.597662][ T799] [ 1478.765172][ T799] ERROR: (device loop4): diWrite: ixpxd invalid [ 1478.765172][ T799] [ 1478.811008][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1478.819381][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1478.828453][ T5859] usb 1-1: USB disconnect, device number 75 [ 1478.865567][ T799] ERROR: (device loop4): txCommit: [ 1478.865567][ T799] [ 1479.047792][T27419] [ 1479.047792][T27419] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1479.047792][T27419] [ 1479.079190][T27419] [ 1479.079190][T27419] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1479.079190][T27419] [ 1479.136846][ T829] openvswitch: netlink: Message has 4 unknown bytes. [ 1479.345578][ T833] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 1480.263179][ T862] geneve2: entered promiscuous mode [ 1480.400484][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11779'. [ 1480.575546][ T877] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1480.593701][ T877] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1480.604816][ T875] loop4: detected capacity change from 0 to 1764 [ 1480.709624][ T881] infiniband syz2: set active [ 1480.742364][ T881] infiniband syz2: set active [ 1480.749512][ T881] infiniband syz2: set active [ 1480.874644][ T881] erspan0: left promiscuous mode [ 1480.884334][ T881] erspan0: left allmulticast mode [ 1480.940926][ T881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.000917][T32582] lo speed is unknown, defaulting to 1000 [ 1481.014653][ T788] lo speed is unknown, defaulting to 1000 [ 1481.044025][ T788] lo speed is unknown, defaulting to 1000 [ 1481.055509][T23168] lo speed is unknown, defaulting to 1000 [ 1481.118628][ T890] loop4: detected capacity change from 0 to 4096 [ 1481.147649][ T890] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1481.276553][ T890] ntfs3: loop4: failed to convert "c46c" to cp864 [ 1481.419052][ T902] bond1: entered promiscuous mode [ 1481.489671][ T902] bond1: entered allmulticast mode [ 1481.721365][ T919] loop0: detected capacity change from 0 to 8 [ 1482.028037][ T937] 9pnet_fd: Insufficient options for proto=fd [ 1482.509559][ T961] loop2: detected capacity change from 0 to 64 [ 1482.787686][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11820'. [ 1482.852039][ T971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11820'. [ 1482.999280][ T977] __vm_enough_memory: pid: 977, comm: syz.2.11822, not enough memory for the allocation [ 1483.048713][ T980] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11824'. [ 1483.333602][ T991] netlink: 'syz.0.11829': attribute type 1 has an invalid length. [ 1483.358010][ T991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11829'. [ 1483.386358][ T996] loop2: detected capacity change from 0 to 512 [ 1483.426166][ T996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.466897][ T996] ext4 filesystem being mounted at /3058/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.617340][ T1008] loop0: detected capacity change from 0 to 256 [ 1483.646116][ T1008] exfat: Deprecated parameter 'namecase' [ 1483.651313][ T996] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.11830: bg 0: bad block bitmap checksum [ 1483.651852][ T1008] exfat: Deprecated parameter 'utf8' [ 1483.651911][ T1008] exfat: Deprecated parameter 'namecase' [ 1483.731840][ T1008] exfat: Deprecated parameter 'utf8' [ 1483.748916][ T996] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Filesystem failed CRC [ 1483.782321][ T1008] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1483.899328][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.003124][ T1021] kernel read not supported for file /  (pid: 1021 comm: syz.1.11840) [ 1484.045929][ T28] audit: type=1800 audit(2000000030.135:117): pid=1021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11840" name=200120 dev="mqueue" ino=84508 res=0 errno=0 [ 1484.247632][ T1030] bridge6: entered allmulticast mode [ 1484.410318][ T1038] loop4: detected capacity change from 0 to 1024 [ 1484.528609][ T145] hfsplus: b-tree write err: -5, ino 4 [ 1484.661639][ T1042] loop1: detected capacity change from 0 to 4096 [ 1484.663345][ T28] audit: type=1400 audit(2000000030.698:118): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=1052 comm="syz.0.11849" [ 1484.717103][ T1042] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1484.815593][ T1042] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1484.910040][ T1042] ntfs3: loop1: failed to convert "c46c" to cp874 [ 1485.157042][ T5859] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1485.277825][ T1073] loop4: detected capacity change from 0 to 1024 [ 1485.371140][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 1485.401050][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.424016][ T5859] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1485.435515][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.443594][ T5859] usb 1-1: Product: syz [ 1485.454493][ T5859] usb 1-1: Manufacturer: syz [ 1485.459920][ T5859] usb 1-1: SerialNumber: syz [ 1485.461544][ T145] hfsplus: b-tree write err: -5, ino 4 [ 1485.480242][ T5859] usb 1-1: config 0 descriptor?? [ 1485.496802][ T5859] usb 1-1: bad CDC descriptors [ 1485.521968][ T5859] usb 1-1: unsupported MDLM descriptors [ 1485.643257][ T1083] loop4: detected capacity change from 0 to 256 [ 1485.722811][T32583] usb 1-1: USB disconnect, device number 76 [ 1485.738401][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.764721][ T1085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11866'. [ 1485.780165][ T1083] FAT-fs (loop4): Filesystem has been set read-only [ 1485.786308][ T1085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1485.792117][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.846669][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.867012][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.889353][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.921744][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.948542][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.969297][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1485.986935][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1486.006759][ T1083] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1486.009194][ T1091] loop1: detected capacity change from 0 to 512 [ 1486.034186][ T1091] EXT4-fs: Ignoring removed nobh option [ 1486.055693][ T28] audit: type=1800 audit(2000000031.990:119): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11863" name="file1" dev="loop4" ino=1048696 res=0 errno=0 [ 1486.089808][ T1091] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #3: comm syz.1.11869: corrupted inode contents [ 1486.112348][ T1083] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1486.130701][ T1091] EXT4-fs (loop1): Remounting filesystem read-only [ 1486.148286][ T1091] Quota error (device loop1): write_blk: dquota write failed [ 1486.156563][ T1091] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1486.166801][ T1091] EXT4-fs (loop1): 1 truncate cleaned up [ 1486.177932][ T1091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.192111][ T1091] ext4 filesystem being mounted at /2976/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1486.346742][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.506958][ T1103] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11873'. [ 1486.939331][ T7383] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1487.145760][ T7383] usb 1-1: Using ep0 maxpacket: 32 [ 1487.166024][ T7383] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.249152][ T7383] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1487.265949][ T7383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.280946][ T7383] usb 1-1: Product: syz [ 1487.293208][ T7383] usb 1-1: Manufacturer: syz [ 1487.303561][ T7383] usb 1-1: SerialNumber: syz [ 1487.315403][ T7383] usb 1-1: config 0 descriptor?? [ 1487.342317][ T7383] usb 1-1: bad CDC descriptors [ 1487.351202][ T7383] usb 1-1: unsupported MDLM descriptors [ 1487.392762][ T1098] loop2: detected capacity change from 0 to 40427 [ 1487.421197][ T1098] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1487.433090][ T1098] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1487.468639][ T1098] F2FS-fs (loop2): invalid crc value [ 1487.479173][ T1098] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1487.546843][ T1131] loop4: detected capacity change from 0 to 2048 [ 1487.581929][ T1098] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1487.589167][ T1098] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1487.592412][ T7383] usb 1-1: USB disconnect, device number 77 [ 1487.603266][ T789] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1487.626694][ T1131] loop4: p1 p2 p3 [ 1487.827874][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 1487.859209][ T789] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1487.879625][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.901750][ T789] usb 2-1: Product: syz [ 1487.909013][ T789] usb 2-1: Manufacturer: syz [ 1487.924709][ T789] usb 2-1: SerialNumber: syz [ 1487.949197][ T789] usb 2-1: config 0 descriptor?? [ 1487.978819][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1488.011815][ T789] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1488.014891][T18867] udevd[18867]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1488.026035][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1488.491799][ T789] ssu100: probe of 2-1:0.0 failed with error -71 [ 1488.515180][ T789] usb 2-1: USB disconnect, device number 66 [ 1488.888464][ T1159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11899'. [ 1489.698288][ T1192] loop0: detected capacity change from 0 to 256 [ 1489.740765][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11916'. [ 1489.764711][ T1196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11917'. [ 1490.686721][ T1231] xt_connbytes: Forcing CT accounting to be enabled [ 1490.932274][ T1242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11939'. [ 1491.016568][ T1242] veth4: entered promiscuous mode [ 1491.021701][ T1242] veth4: entered allmulticast mode [ 1491.080636][ T28] audit: type=1326 audit(2000000036.621:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1247 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1491.153303][ T28] audit: type=1326 audit(2000000036.621:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1247 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1491.240853][ T28] audit: type=1326 audit(2000000036.631:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1247 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1491.263285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1491.317335][ T28] audit: type=1326 audit(2000000036.631:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1247 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1491.417500][ T28] audit: type=1326 audit(2000000036.631:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1247 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1491.518703][ T1260] loop1: detected capacity change from 0 to 128 [ 1491.558289][ T1260] affs: Error parsing options [ 1491.898961][ T1279] loop2: detected capacity change from 0 to 64 [ 1492.730907][ T1273] loop4: detected capacity change from 0 to 32768 [ 1492.868510][ T1310] loop0: detected capacity change from 0 to 256 [ 1492.957703][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1492.998158][ T1310] FAT-fs (loop0): Filesystem has been set read-only [ 1493.029758][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.094394][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.124566][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.169439][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.173238][ T1317] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.11974' sets config #0 [ 1493.204198][ T1314] loop4: detected capacity change from 0 to 2048 [ 1493.204252][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.250628][ T1314] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1493.258798][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.295513][ T1314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1493.304326][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.343515][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.369515][ T1310] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1493.413281][ T28] audit: type=1800 audit(2000000038.781:125): pid=1310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11969" name="file1" dev="loop0" ino=1048697 res=0 errno=0 [ 1493.444947][ T1310] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1494.041994][ T1341] netlink: 'syz.1.11985': attribute type 64 has an invalid length. [ 1494.050886][ T1341] netlink: 'syz.1.11985': attribute type 4 has an invalid length. [ 1494.058759][ T1341] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11985'. [ 1494.421318][ T1356] loop4: detected capacity change from 0 to 256 [ 1494.569630][T23168] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1494.764646][T23168] usb 1-1: Using ep0 maxpacket: 32 [ 1494.807232][T23168] usb 1-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 1494.832757][T23168] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1494.883745][T23168] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1494.917603][T23168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.950816][T23168] usb 1-1: config 0 descriptor?? [ 1494.995281][T23168] usb 1-1: bad CDC descriptors [ 1495.014582][T23168] usb 1-1: bad CDC descriptors [ 1495.264865][ T789] usb 1-1: USB disconnect, device number 78 [ 1495.583914][ T1400] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1495.611854][ T1400] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1496.027331][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.041162][ T1415] ip6t_REJECT: ECHOREPLY is not supported [ 1496.066402][ T1417] loop4: detected capacity change from 0 to 256 [ 1496.647106][ T1439] netlink: 'syz.1.12032': attribute type 4 has an invalid length. [ 1496.679066][ T1439] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12032'. [ 1496.799114][ T1447] loop1: detected capacity change from 0 to 64 [ 1496.987566][ T1452] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.12039'. [ 1497.074687][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12040'. [ 1497.261973][ T1459] netlink: 'syz.0.12042': attribute type 1 has an invalid length. [ 1497.491290][ T1471] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12048'. [ 1497.714321][ T1477] loop4: detected capacity change from 0 to 1024 [ 1497.914639][ T1485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12055'. [ 1498.309835][ T1467] loop1: detected capacity change from 0 to 32768 [ 1498.377478][ T1467] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1498.609867][ T1513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12065'. [ 1498.639953][ T1467] XFS (loop1): Ending clean mount [ 1498.660554][ T1467] XFS (loop1): Quotacheck needed: Please wait. [ 1498.830948][ T1467] XFS (loop1): Quotacheck: Done. [ 1498.994418][ T5866] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1499.406398][ T1535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12077'. [ 1499.424839][T23168] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1499.538651][ T1539] loop1: detected capacity change from 0 to 2048 [ 1499.590298][ T1539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1499.631043][T23168] usb 3-1: Using ep0 maxpacket: 8 [ 1499.647141][T23168] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1499.671919][T23168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.717563][T23168] usb 3-1: Product: syz [ 1499.724583][T23168] usb 3-1: Manufacturer: syz [ 1499.746402][T23168] usb 3-1: SerialNumber: syz [ 1499.766424][T23168] usb 3-1: config 0 descriptor?? [ 1499.791399][T23168] gspca_main: se401-2.14.0 probing 047d:5003 [ 1499.799473][ T1545] PKCS8: Unsupported PKCS#8 version [ 1499.865618][ T1547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12082'. [ 1500.265746][T23168] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1500.289104][T23168] se401: probe of 3-1:0.0 failed with error -71 [ 1500.339145][T23168] usb 3-1: USB disconnect, device number 57 [ 1500.867686][ T1583] netlink: 'syz.0.12100': attribute type 2 has an invalid length. [ 1501.080221][ T1591] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1501.326948][ T1598] loop0: detected capacity change from 0 to 64 [ 1501.651851][ T1608] netlink: 'syz.1.12112': attribute type 21 has an invalid length. [ 1501.685651][ T1608] IPv6: NLM_F_CREATE should be specified when creating new route [ 1501.695019][ T1608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1501.703367][ T1608] IPv6: NLM_F_CREATE should be set when creating new route [ 1501.710706][ T1608] IPv6: NLM_F_CREATE should be set when creating new route [ 1501.718059][ T1608] IPv6: NLM_F_CREATE should be set when creating new route [ 1501.884063][ T1614] xt_cgroup: xt_cgroup: no path or classid specified [ 1501.910217][ T1613] loop0: detected capacity change from 0 to 8 [ 1501.925754][ T28] audit: type=1326 audit(2000000046.633:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1615 comm="syz.4.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1501.994336][ T28] audit: type=1326 audit(2000000046.633:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1615 comm="syz.4.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1502.091630][ T28] audit: type=1326 audit(2000000046.660:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1615 comm="syz.4.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1502.114194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1502.171848][ T28] audit: type=1326 audit(2000000046.670:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1615 comm="syz.4.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1502.256301][ T28] audit: type=1326 audit(2000000046.670:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1615 comm="syz.4.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1502.278789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1502.314875][ T1587] loop2: detected capacity change from 0 to 40427 [ 1502.352233][ T1587] F2FS-fs (loop2): invalid crc value [ 1502.592084][ T1587] F2FS-fs (loop2): Start checkpoint disabled! [ 1502.642978][ T1587] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1502.698578][ T1587] F2FS-fs (loop2): disabling checkpoint not compatible with read-only [ 1503.132502][ T7383] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1503.358980][ T7383] usb 1-1: Using ep0 maxpacket: 32 [ 1503.368547][ T7383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1503.390618][ T7383] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 1503.411037][ T7383] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.431318][ T7383] usb 1-1: config 7 has no interface number 0 [ 1503.466360][ T7383] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1503.494214][ T7383] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.533893][ T7383] usb 1-1: config 7 interface 187 has no altsetting 0 [ 1503.550704][ T7383] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1503.566502][ T7383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.585716][ T7383] usb 1-1: Product: syz [ 1503.597335][ T7383] usb 1-1: Manufacturer: syz [ 1503.602421][ T7383] usb 1-1: SerialNumber: syz [ 1503.707799][ T1665] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1503.873853][ T7383] usb 1-1: Limiting number of CPorts to U8_MAX [ 1503.909099][ T7383] usb 1-1: Unknown endpoint type found, address 0x07 [ 1503.933208][ T7383] usb 1-1: Not enough endpoints found in device, aborting! [ 1504.139605][T32583] usb 1-1: USB disconnect, device number 79 [ 1504.233689][ T1678] loop1: detected capacity change from 0 to 4096 [ 1504.462338][ T1661] loop2: detected capacity change from 0 to 32768 [ 1504.557681][ T1661] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 1504.557681][ T1661] [ 1505.453045][ T1705] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1505.706235][ T1712] netlink: 'syz.0.12161': attribute type 3 has an invalid length. [ 1505.725558][ T1714] loop2: detected capacity change from 0 to 256 [ 1505.740417][ T1712] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1505.761962][ T1694] loop4: detected capacity change from 0 to 32768 [ 1505.782606][ T1714] FAT-fs (loop2): Directory bread(block 64) failed [ 1505.800296][ T1694] (syz.4.12154,1694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1505.816210][ T1714] FAT-fs (loop2): Directory bread(block 65) failed [ 1505.836085][ T1714] FAT-fs (loop2): Directory bread(block 66) failed [ 1505.854300][ T1694] (syz.4.12154,1694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1505.868674][ T1714] FAT-fs (loop2): Directory bread(block 67) failed [ 1505.887460][ T1714] FAT-fs (loop2): Directory bread(block 68) failed [ 1505.894082][ T1714] FAT-fs (loop2): Directory bread(block 69) failed [ 1505.945508][ T1714] FAT-fs (loop2): Directory bread(block 70) failed [ 1505.962559][ T1694] JBD2: Ignoring recovery information on journal [ 1505.975551][ T1714] FAT-fs (loop2): Directory bread(block 71) failed [ 1506.001276][ T1714] FAT-fs (loop2): Directory bread(block 72) failed [ 1506.009061][ T1714] FAT-fs (loop2): Directory bread(block 73) failed [ 1506.083290][ T1694] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1506.122470][ T28] audit: type=1800 audit(2000000050.499:131): pid=1714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12162" name="file1" dev="loop2" ino=1048699 res=0 errno=0 [ 1506.143466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.602156][ T1735] netlink: 'syz.1.12172': attribute type 1 has an invalid length. [ 1506.610125][ T1735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12172'. [ 1506.678798][T27419] ocfs2: Unmounting device (7,4) on (node local) [ 1507.153903][ T1753] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1507.337265][ T1757] --map-set only usable from mangle table [ 1508.444157][ T1755] loop1: detected capacity change from 0 to 32768 [ 1508.503735][ T1755] (syz.1.12182,1755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1508.578759][ T1755] (syz.1.12182,1755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1508.657823][ T1755] JBD2: Ignoring recovery information on journal [ 1508.863148][ T1791] loop0: detected capacity change from 0 to 4096 [ 1508.897044][ T1755] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1509.114359][ T1791] ntfs: (device loop0): parse_options(): NLS character set cp8ƒÓ O¥¿one_multiplier=0x0000000000000001gid=0 not found. Using previous one cp862. [ 1509.218575][ T1791] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1509.261757][ T1791] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1509.306824][ T1791] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1509.344804][ T1791] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1509.376576][ T1791] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1509.391855][ T1791] ntfs: volume version 3.1. [ 1509.398331][ T5866] ocfs2: Unmounting device (7,1) on (node local) [ 1509.405575][ T1791] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1509.423356][ T1791] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1509.438671][ T1791] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1509.465839][ T1791] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1510.089959][ T1833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12217'. [ 1510.108208][ T1833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12217'. [ 1510.140043][ T1834] loop4: detected capacity change from 0 to 64 [ 1510.163710][ T1834] syz.4.12218: attempt to access beyond end of device [ 1510.163710][ T1834] loop4: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 1510.220215][ T1834] Buffer I/O error on dev loop4, logical block 32767, async page read [ 1510.229296][ T1834] syz.4.12218: attempt to access beyond end of device [ 1510.229296][ T1834] loop4: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 1510.279746][ T1834] Buffer I/O error on dev loop4, logical block 32767, async page read [ 1510.661423][ T1844] loop2: detected capacity change from 0 to 4096 [ 1510.706828][ T1844] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1510.888703][ T1844] ntfs3: loop2: failed to convert "c46c" to cp936 [ 1510.940501][ T1857] netlink: 'syz.4.12230': attribute type 5 has an invalid length. [ 1511.071472][ T1860] xt_hashlimit: max too large, truncated to 1048576 [ 1511.094104][ T1860] No such timeout policy "syz1" [ 1511.377793][ T1871] netlink: 'syz.2.12236': attribute type 4 has an invalid length. [ 1511.389744][ T1871] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12236'. [ 1511.405184][ T1874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1511.441041][ T1871] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1511.492295][ T1873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12237'. [ 1511.871626][ T1890] loop2: detected capacity change from 0 to 256 [ 1511.930655][ T1890] FAT-fs (loop2): Directory bread(block 64) failed [ 1511.956515][ T1890] FAT-fs (loop2): Directory bread(block 65) failed [ 1511.975205][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1511.975203][ T1890] FAT-fs (loop2): Directory bread(block 66) failed [ 1511.975241][ T1890] FAT-fs (loop2): Directory bread(block 67) failed [ 1512.043292][ T1890] FAT-fs (loop2): Directory bread(block 68) failed [ 1512.065170][ T1890] FAT-fs (loop2): Directory bread(block 69) failed [ 1512.099292][ T1890] FAT-fs (loop2): Directory bread(block 70) failed [ 1512.108662][ T1890] FAT-fs (loop2): Directory bread(block 71) failed [ 1512.131112][ T1890] FAT-fs (loop2): Directory bread(block 72) failed [ 1512.150743][ T1890] FAT-fs (loop2): Directory bread(block 73) failed [ 1512.510380][ T1878] loop0: detected capacity change from 0 to 32768 [ 1512.646910][ T1878] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 1512.646910][ T1878] [ 1512.924493][ T1917] SET target dimension over the limit! [ 1512.972960][ T1919] netlink: 'syz.4.12260': attribute type 21 has an invalid length. [ 1512.993739][ T1919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12260'. [ 1513.134646][ T789] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1513.395231][ T789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1513.404358][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.426933][ T789] usb 2-1: Product: syz [ 1513.433576][ T1929] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12265'. [ 1513.437979][ T789] usb 2-1: Manufacturer: syz [ 1513.459939][ T789] usb 2-1: SerialNumber: syz [ 1513.485722][ T789] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1513.537569][ T7383] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1514.009397][ T1944] loop0: detected capacity change from 0 to 4096 [ 1514.128737][ T789] usb 2-1: USB disconnect, device number 67 [ 1514.254713][ T1944] ntfs3: loop0: ino=5, "/" directory corrupted [ 1514.662899][ T7383] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1514.670534][ T1942] loop2: detected capacity change from 0 to 32768 [ 1514.689213][ T1942] (syz.2.12269,1942,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1514.695388][ T7383] ath9k_htc: Failed to initialize the device [ 1514.717378][ T1942] (syz.2.12269,1942,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1514.784871][ T789] usb 2-1: ath9k_htc: USB layer deinitialized [ 1514.814793][ T1942] JBD2: Ignoring recovery information on journal [ 1514.930542][ T1942] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1514.959466][ T1948] loop4: detected capacity change from 0 to 32768 [ 1515.025439][ T1948] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1515.111794][ T1948] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1515.150335][ T1948] (syz.4.12273,1948,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1 [ 1515.183059][ T1948] (syz.4.12273,1948,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1515.192002][ T1948] (syz.4.12273,1948,0):ocfs2_mknod:298 ERROR: status = -2 [ 1515.202080][ T1948] (syz.4.12273,1948,0):ocfs2_mknod:502 ERROR: status = -2 [ 1515.211037][ T1948] (syz.4.12273,1948,0):ocfs2_create:676 ERROR: status = -2 [ 1515.281103][ T5868] ocfs2: Unmounting device (7,2) on (node local) [ 1515.440139][T27419] ocfs2: Unmounting device (7,4) on (node local) [ 1516.444831][ T2002] loop1: detected capacity change from 0 to 256 [ 1516.470371][ T2002] FAT-fs (loop1): Directory bread(block 64) failed [ 1516.480724][ T2002] FAT-fs (loop1): Directory bread(block 65) failed [ 1516.522571][ T2002] FAT-fs (loop1): Directory bread(block 66) failed [ 1516.587111][ T2002] FAT-fs (loop1): Directory bread(block 67) failed [ 1516.616817][ T2002] FAT-fs (loop1): Directory bread(block 68) failed [ 1516.634717][ T2006] ip6gretap3: entered promiscuous mode [ 1516.644174][ T2002] FAT-fs (loop1): Directory bread(block 69) failed [ 1516.668724][ T2002] FAT-fs (loop1): Directory bread(block 70) failed [ 1516.675337][ T2002] FAT-fs (loop1): Directory bread(block 71) failed [ 1516.727036][ T2002] FAT-fs (loop1): Directory bread(block 72) failed [ 1516.752774][ T2002] FAT-fs (loop1): Directory bread(block 73) failed [ 1516.779888][ T2008] loop2: detected capacity change from 0 to 1024 [ 1516.868137][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1516.868154][ T28] audit: type=1326 audit(2000000060.418:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2009 comm="syz.0.12300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x0 [ 1517.330711][ T2024] netlink: 'syz.2.12307': attribute type 1 has an invalid length. [ 1517.579642][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12313'. [ 1517.722104][ T2038] comedi comedi0: Cannot bond this driver to itself! [ 1517.870106][ T2046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12319'. [ 1518.155851][ T2056] futex_wake_op: syz.2.12324 tries to shift op by 32; fix this program [ 1518.957718][ T2089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1520.023581][ T2131] IPVS: set_ctl: invalid protocol: 8 172.30.0.1:20002 [ 1520.223168][ T2141] netlink: 'syz.2.12365': attribute type 28 has an invalid length. [ 1520.248824][ T2141] netlink: 'syz.2.12365': attribute type 29 has an invalid length. [ 1520.271870][ T2141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12365'. [ 1520.956157][ T2167] loop2: detected capacity change from 0 to 512 [ 1521.039876][ T2167] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.12378: inode has both inline data and extents flags [ 1521.122565][ T2167] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.12378: couldn't read orphan inode 15 (err -117) [ 1521.185221][ T2167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1521.408695][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.786661][ T2232] loop2: detected capacity change from 0 to 256 [ 1522.841246][ T2232] exfat: Deprecated parameter 'utf8' [ 1522.862541][ T2232] exfat: Deprecated parameter 'namecase' [ 1522.872283][ T2232] exfat: Deprecated parameter 'utf8' [ 1522.920483][ T2232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1523.269291][ T2215] comedi comedi0: reset error (fatal) [ 1523.373823][ T2222] loop0: detected capacity change from 0 to 32768 [ 1523.421548][ T2222] (syz.0.12403,2222,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 1523.447058][ T2222] (syz.0.12403,2222,0):ocfs2_mount_volume:1807 ERROR: status = -22 [ 1523.477794][ T2222] (syz.0.12403,2222,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1523.562831][ T2222] NILFS (loop0): couldn't find nilfs on the device [ 1523.593759][ T2246] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1523.784455][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12416'. [ 1523.897894][ T2256] libceph: resolve '0..' (ret=-3): failed [ 1524.092031][ T2262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12422'. [ 1524.122257][ T2262] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12422'. [ 1524.150980][ T2262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12422'. [ 1524.170213][ T2262] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12422'. [ 1524.180477][ T2262] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12422'. [ 1524.777453][ T2280] loop4: detected capacity change from 0 to 4096 [ 1524.874920][ T2280] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1524.897848][ T2280] ntfs3: loop4: Failed to load $Extend (-22). [ 1524.910274][ T2280] ntfs3: loop4: Failed to initialize $Extend. [ 1525.281887][ T2302] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12440'. [ 1525.684649][T32583] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1525.898271][T32583] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.917571][T32583] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1525.946506][T32583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.994080][T32583] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1526.320719][ T2310] loop0: detected capacity change from 0 to 32768 [ 1526.348185][ T2310] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 1526.348185][ T2310] [ 1526.365054][ T2310] ialloc: diAlloc returned -5! [ 1526.467268][ T2337] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1526.530894][T23168] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1526.761581][T23168] usb 3-1: Using ep0 maxpacket: 32 [ 1526.779701][T23168] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1526.796371][T23168] usb 3-1: config 0 has no interface number 0 [ 1526.814798][T23168] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1526.829923][T23168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.847262][T23168] usb 3-1: Product: syz [ 1526.858341][T23168] usb 3-1: Manufacturer: syz [ 1526.874315][T23168] usb 3-1: SerialNumber: syz [ 1526.901934][T23168] usb 3-1: config 0 descriptor?? [ 1527.149165][T32583] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1527.177940][T32583] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1527.184586][T23168] radio-si470x 3-1:0.35: this is not a si470x device. [ 1527.198008][T32583] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1527.206704][T32583] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1527.223260][T32583] usb 5-1: USB disconnect, device number 12 [ 1527.388952][T23168] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1527.417113][T23168] usb 3-1: USB disconnect, device number 58 [ 1527.951025][T32583] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1528.175682][T32583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1528.187262][T32583] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1528.207536][T32583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1528.225585][T32583] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1528.260635][T32583] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1528.287448][T32583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.321094][T32583] usb 1-1: config 0 descriptor?? [ 1528.544070][ T2403] team0: Port device syz_tun removed [ 1528.564611][ T2403] bond0: left allmulticast mode [ 1528.569253][T32583] hdpvr 1-1:0.0: firmware version 0x8 dated [ 1528.574889][ T2403] bond_slave_0: left allmulticast mode [ 1528.581375][ T2403] bond_slave_1: left allmulticast mode [ 1528.587020][ T2403] bond0: left promiscuous mode [ 1528.595448][ T2403] bond_slave_0: left promiscuous mode [ 1528.601714][ T2403] bond_slave_1: left promiscuous mode [ 1528.617678][ T2403] bridge0: port 3(bond0) entered disabled state [ 1528.645093][ T2403] bridge_slave_0: left allmulticast mode [ 1528.653727][ T2403] bridge_slave_0: left promiscuous mode [ 1528.661712][ T2403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.680719][ T2403] bridge_slave_1: left allmulticast mode [ 1528.687024][ T2403] bridge_slave_1: left promiscuous mode [ 1528.705987][ T2403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.735292][ T2403] bond0: (slave bond_slave_0): Releasing backup interface [ 1528.775293][ T2403] bond0: (slave bond_slave_1): Releasing backup interface [ 1528.797404][T32583] hdpvr 1-1:0.0: device init failed [ 1528.808357][T32583] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1528.834191][T32583] usb 1-1: USB disconnect, device number 80 [ 1528.835519][ T2403] team0: Port device team_slave_0 removed [ 1528.884924][ T2403] team0: Port device team_slave_1 removed [ 1528.923683][ T2403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.935496][ T2403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.951272][ T2403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.963495][ T2403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.040345][ T2416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12492'. [ 1529.066314][ T2416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12492'. [ 1529.076568][ T2416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12492'. [ 1529.555423][ T2442] x_tables: unsorted underflow at hook 4 [ 1529.753709][ T2448] __nla_validate_parse: 2 callbacks suppressed [ 1529.753730][ T2448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12504'. [ 1530.002855][ T2456] block device autoloading is deprecated and will be removed. [ 1530.283513][ T2467] vivid-008: disconnect [ 1530.300437][ T2466] vivid-008: reconnect [ 1530.513163][ T2480] binfmt_misc: register: failed to install interpreter file ./bus [ 1530.654066][ T2479] loop4: detected capacity change from 0 to 4096 [ 1530.685099][ T2489] loop0: detected capacity change from 0 to 256 [ 1530.687079][ T2479] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1531.105383][ T2497] loop0: detected capacity change from 0 to 2048 [ 1531.164145][ T2497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1531.386607][ T2506] netlink: 'syz.1.12527': attribute type 1 has an invalid length. [ 1531.394499][ T2506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12527'. [ 1531.576537][ T2511] loop4: detected capacity change from 0 to 1024 [ 1531.715329][ T2491] loop2: detected capacity change from 0 to 32768 [ 1532.064616][ T7383] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1532.297389][ T2530] loop2: detected capacity change from 0 to 1764 [ 1532.308695][ T7383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1532.339213][ T7383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1532.383340][ T7383] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1532.392562][ T7383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.422562][ T2530] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1532.430765][ T7383] usb 2-1: Product: syz [ 1532.439530][ T7383] usb 2-1: Manufacturer: syz [ 1532.444187][ T7383] usb 2-1: SerialNumber: syz [ 1532.482402][ T7383] usb 2-1: config 0 descriptor?? [ 1532.516291][ T7383] hub 2-1:0.0: bad descriptor, ignoring hub [ 1532.555770][ T7383] hub: probe of 2-1:0.0 failed with error -5 [ 1532.589442][ T7383] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input85 [ 1532.767161][ T2541] team0: Port device syz_tun removed [ 1532.793453][ T2541] dummy0: left allmulticast mode [ 1532.804015][ T2541] dummy0: left promiscuous mode [ 1532.847645][ T2541] bridge0: port 3(dummy0) entered disabled state [ 1532.886802][ T2541] bridge_slave_0: left allmulticast mode [ 1532.901875][ T2541] bridge_slave_0: left promiscuous mode [ 1532.922474][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.949851][ T2541] bridge_slave_1: left allmulticast mode [ 1532.955696][ T2541] bridge_slave_1: left promiscuous mode [ 1532.973598][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.996832][ T2541] bond0: (slave bond_slave_0): Releasing backup interface [ 1533.027958][ T2541] bond0: (slave bond_slave_1): Releasing backup interface [ 1533.091020][ T2541] team0: Port device team_slave_0 removed [ 1533.124280][ T2541] team0: Port device team_slave_1 removed [ 1533.143043][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1533.151397][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.161340][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.168966][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1533.182188][ T2556] loop0: detected capacity change from 0 to 4096 [ 1533.191150][ T2552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12546'. [ 1533.205081][ T2552] netlink: 30 bytes leftover after parsing attributes in process `syz.2.12546'. [ 1533.224912][ T2556] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1533.242064][ T2556] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1533.256616][ T2556] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1533.271723][ T2556] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1533.329052][ T2556] ntfs: volume version 3.1. [ 1534.186769][ T2589] loop0: detected capacity change from 0 to 512 [ 1534.299129][ T2589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.422784][ T2589] ext4 filesystem being mounted at /3068/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.580515][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.172768][ T2634] delete_channel: no stack [ 1535.630698][ T2618] loop0: detected capacity change from 0 to 32768 [ 1535.713482][ T2650] loop2: detected capacity change from 0 to 256 [ 1535.746801][ T2650] exfat: Deprecated parameter 'utf8' [ 1535.752402][ T2650] exfat: Deprecated parameter 'utf8' [ 1535.760445][ T2652] netlink: 304 bytes leftover after parsing attributes in process `syz.1.12585'. [ 1535.808808][ T2650] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1536.130140][ T2633] loop4: detected capacity change from 0 to 32768 [ 1536.416569][ T2664] loop0: detected capacity change from 0 to 4096 [ 1536.449280][ T2664] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1536.488906][ T2664] NILFS (loop0): trying rollback from an earlier position [ 1536.547050][ T2671] lo: entered promiscuous mode [ 1536.554348][ T2664] NILFS (loop0): recovery complete [ 1536.566544][ T2671] lo: entered allmulticast mode [ 1536.603867][ T2671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1536.997058][ T2685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12596'. [ 1537.024852][ T2685] netlink: 660 bytes leftover after parsing attributes in process `syz.0.12596'. [ 1537.253897][ T2690] netlink: 'syz.4.12601': attribute type 1 has an invalid length. [ 1537.278995][ T2690] netlink: 'syz.4.12601': attribute type 1 has an invalid length. [ 1537.313657][ T2690] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12601'. [ 1537.815720][ T5859] usb 2-1: USB disconnect, device number 68 [ 1537.992366][ T2682] loop2: detected capacity change from 0 to 32768 [ 1538.483346][ T2701] loop0: detected capacity change from 0 to 32768 [ 1538.529798][ T2701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12605 (2701) [ 1538.599085][ T2701] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1538.612310][ T2701] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1538.625248][ T2701] BTRFS info (device loop0): force clearing of disk cache [ 1538.645098][ T2701] BTRFS info (device loop0): enabling auto defrag [ 1538.651976][ T2733] netlink: 'syz.1.12619': attribute type 1 has an invalid length. [ 1538.673692][ T2701] BTRFS info (device loop0): enabling ssd optimizations [ 1538.687128][ T2701] BTRFS info (device loop0): max_inline at 0 [ 1538.693777][ T2701] BTRFS info (device loop0): enabling disk space caching [ 1538.722593][ T2701] BTRFS info (device loop0): disk space caching is enabled [ 1538.869365][ T2701] BTRFS info (device loop0): rebuilding free space tree [ 1538.976114][ T2701] BTRFS info (device loop0): disabling free space tree [ 1538.998844][ T2701] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1539.036867][ T2701] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1539.054241][ T2753] loop1: detected capacity change from 0 to 4096 [ 1539.161376][ T2753] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1539.185954][ T2753] ntfs3: loop1: Failed to load $Extend (-22). [ 1539.196468][ T2753] ntfs3: loop1: Failed to initialize $Extend. [ 1539.420945][ T5865] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1540.023135][ T2791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12633'. [ 1540.393306][ T2796] loop4: detected capacity change from 0 to 4096 [ 1540.544936][ T2796] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1540.574818][ T2796] ntfs3: loop4: Failed to load $Extend (-22). [ 1540.608209][ T2796] ntfs3: loop4: Failed to initialize $Extend. [ 1541.753632][ T2863] loop4: detected capacity change from 0 to 4096 [ 1541.764958][ T2863] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1541.843178][ T2863] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1542.651619][ T2897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12674'. [ 1543.403234][ T2928] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.12691'. [ 1543.859542][T23168] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1544.065437][T23168] usb 3-1: Using ep0 maxpacket: 8 [ 1544.074776][T23168] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1544.109427][T23168] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1544.130653][T23168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.141095][T23168] usb 3-1: Product: syz [ 1544.157620][T23168] usb 3-1: Manufacturer: syz [ 1544.162337][T23168] usb 3-1: SerialNumber: syz [ 1544.187149][T23168] usb 3-1: config 0 descriptor?? [ 1544.211111][T23168] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1544.341106][ T2948] loop0: detected capacity change from 0 to 4096 [ 1544.394081][ T2948] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1544.440032][ T2948] ntfs3: loop0: Failed to load $Extend (-22). [ 1544.449961][T23168] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1544.480551][T23168] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1544.486430][ T2948] ntfs3: loop0: Failed to initialize $Extend. [ 1544.671026][T23168] usb 3-1: USB disconnect, device number 59 [ 1545.040519][ T2968] netlink: 'syz.0.12711': attribute type 10 has an invalid length. [ 1545.157524][ T2968] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1545.397696][ T2982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12717'. [ 1545.410831][ T2982] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12717'. [ 1545.419950][ T2982] netlink: 'syz.1.12717': attribute type 3 has an invalid length. [ 1545.429115][ T2982] netlink: 'syz.1.12717': attribute type 2 has an invalid length. [ 1545.451989][ T2982] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12717'. [ 1545.560082][ T2983] loop2: detected capacity change from 0 to 4096 [ 1545.626725][ T2983] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1545.638049][ T2990] autofs4:pid:2990:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 1545.676952][ T2983] ntfs3: loop2: Failed to load $Extend (-22). [ 1545.697971][ T2983] ntfs3: loop2: Failed to initialize $Extend. [ 1545.876074][T32582] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1546.092308][T32582] usb 5-1: Using ep0 maxpacket: 16 [ 1546.111310][T32582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1546.141220][T32582] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1546.172857][T32582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.201852][T32582] usb 5-1: config 0 descriptor?? [ 1546.221625][T32582] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 1546.475045][T32582] usb 5-1: USB disconnect, device number 13 [ 1546.775780][ T3026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12739'. [ 1546.983826][ T3034] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 1546.993526][ T3034] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 1547.484704][ T3054] loop4: detected capacity change from 0 to 256 [ 1547.536786][ T3054] FAT-fs (loop4): Directory bread(block 64) failed [ 1547.554023][ T3054] FAT-fs (loop4): Directory bread(block 65) failed [ 1547.569810][ T3054] FAT-fs (loop4): Directory bread(block 66) failed [ 1547.578562][ T3054] FAT-fs (loop4): Directory bread(block 67) failed [ 1547.585385][ T3054] FAT-fs (loop4): Directory bread(block 68) failed [ 1547.597488][ T3054] FAT-fs (loop4): Directory bread(block 69) failed [ 1547.608268][ T3054] FAT-fs (loop4): Directory bread(block 70) failed [ 1547.632823][ T3054] FAT-fs (loop4): Directory bread(block 71) failed [ 1547.640841][ T3054] FAT-fs (loop4): Directory bread(block 72) failed [ 1547.660389][ T3054] FAT-fs (loop4): Directory bread(block 73) failed [ 1547.990155][ T3068] i2c i2c-0: Invalid block read size 255 [ 1548.162684][ T3075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12763'. [ 1548.172112][ T3075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12763'. [ 1548.405640][ T3085] infiniband syz2: set active [ 1548.498398][ T3085] team0: Port device syz_tun removed [ 1548.526220][ T3085] dummy0: left allmulticast mode [ 1548.542771][ T3085] dummy0: left promiscuous mode [ 1548.551714][ T3085] bridge0: port 3(dummy0) entered disabled state [ 1548.578531][ T3085] bridge_slave_0: left allmulticast mode [ 1548.595889][ T3085] bridge_slave_0: left promiscuous mode [ 1548.603286][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.643671][ T3085] bridge_slave_1: left allmulticast mode [ 1548.662759][ T3085] bridge_slave_1: left promiscuous mode [ 1548.675371][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.706809][ T3085] bond0: (slave bond_slave_0): Releasing backup interface [ 1548.782400][ T3085] bond0: (slave bond_slave_1): Releasing backup interface [ 1548.846163][ T3085] team0: Port device team_slave_0 removed [ 1548.894492][ T3085] team0: Port device team_slave_1 removed [ 1548.912143][ T3085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.924211][ T3085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.936455][ T3085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.955816][ T3085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.023116][T32582] lo speed is unknown, defaulting to 1000 [ 1549.250150][ T3107] loop4: detected capacity change from 0 to 256 [ 1549.306074][ T3111] xt_TCPMSS: Only works on TCP SYN packets [ 1549.351553][ T3107] FAT-fs (loop4): Directory bread(block 64) failed [ 1549.369087][ T3107] FAT-fs (loop4): Directory bread(block 65) failed [ 1549.384637][ T3107] FAT-fs (loop4): Directory bread(block 66) failed [ 1549.413711][ T3107] FAT-fs (loop4): Directory bread(block 67) failed [ 1549.439485][ T3107] FAT-fs (loop4): Directory bread(block 68) failed [ 1549.458908][ T3107] FAT-fs (loop4): Directory bread(block 69) failed [ 1549.484484][ T3107] FAT-fs (loop4): Directory bread(block 70) failed [ 1549.491197][ T3107] FAT-fs (loop4): Directory bread(block 71) failed [ 1549.510198][ T3115] netlink: 'syz.0.12783': attribute type 4 has an invalid length. [ 1549.534976][ T3107] FAT-fs (loop4): Directory bread(block 72) failed [ 1549.551024][ T3107] FAT-fs (loop4): Directory bread(block 73) failed [ 1549.569593][ T3115] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12783'. [ 1549.822140][ T3123] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12787'. [ 1550.288635][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12795'. [ 1550.316539][ T3139] netlink: 'syz.2.12795': attribute type 1 has an invalid length. [ 1550.325998][ T3143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12797'. [ 1551.269135][ T3182] netlink: 268 bytes leftover after parsing attributes in process `syz.4.12814'. [ 1551.302120][ T3182] unsupported nla_type 65024 [ 1551.447076][ T3187] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1551.455432][ T3187] openvswitch: netlink: Actions may not be safe on all matching packets [ 1552.028350][ T3212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12829'. [ 1552.269112][ T3225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12835'. [ 1552.887463][T32582] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1553.085480][T32582] usb 3-1: Using ep0 maxpacket: 32 [ 1553.110355][T32582] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.128818][T32582] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 1553.152052][T32582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.180513][T32582] usb 3-1: Product: syz [ 1553.194638][T32582] usb 3-1: Manufacturer: syz [ 1553.211874][T32582] usb 3-1: SerialNumber: syz [ 1553.232857][T32582] usb 3-1: config 0 descriptor?? [ 1553.251530][T32582] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 1553.705623][T32582] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1553.727650][T32582] pac7311: probe of 3-1:0.0 failed with error -71 [ 1553.752874][T32582] usb 3-1: USB disconnect, device number 60 [ 1554.223052][ T3281] loop1: detected capacity change from 0 to 8192 [ 1554.372581][ T3289] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12866'. [ 1554.652279][ T3297] loop2: detected capacity change from 0 to 64 [ 1555.004801][ T3306] loop1: detected capacity change from 0 to 8 [ 1555.032390][ T3306] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1555.078334][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop1 [ 1555.137645][ T3286] loop0: detected capacity change from 0 to 32768 [ 1555.184698][ T3286] [ 1555.184698][ T3286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.184698][ T3286] [ 1555.244387][ T3286] [ 1555.244387][ T3286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.244387][ T3286] [ 1555.258163][ T3286] [ 1555.258163][ T3286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.258163][ T3286] [ 1555.287396][ T112] [ 1555.287396][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.287396][ T112] [ 1555.359689][ T3312] sp0: Synchronizing with TNC [ 1555.399366][ T3311] [U] è [ 1555.444362][ T5865] [ 1555.444362][ T5865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.444362][ T5865] [ 1555.467616][ T5865] [ 1555.467616][ T5865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.467616][ T5865] [ 1556.574069][ T3351] netlink: 'syz.4.12896': attribute type 10 has an invalid length. [ 1556.618158][ T3351] team0: Device veth1_macvtap failed to register rx_handler [ 1556.650031][ T3353] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12897'. [ 1556.856431][ T3359] loop0: detected capacity change from 0 to 8 [ 1556.941012][ T3359] SQUASHFS error: Failed to read block 0x285: -5 [ 1556.952228][ T3359] SQUASHFS error: Unable to read metadata cache entry [283] [ 1556.968811][ T3359] SQUASHFS error: Unable to read symlink [8f:60] [ 1557.236087][ T3376] loop0: detected capacity change from 0 to 128 [ 1557.257524][ T3376] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1557.329288][ T3376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1557.456290][ T3384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12909'. [ 1557.692945][ T28] audit: type=1326 audit(2000000098.092:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3389 comm="syz.0.12911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1557.753490][ T28] audit: type=1326 audit(2000000098.092:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3389 comm="syz.0.12911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1557.802159][ T3360] loop2: detected capacity change from 0 to 32768 [ 1557.814633][ T28] audit: type=1326 audit(2000000098.092:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3389 comm="syz.0.12911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1557.844370][ T3360] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.12901 (3360) [ 1557.888439][ T28] audit: type=1326 audit(2000000098.092:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3389 comm="syz.0.12911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1557.928244][ T3360] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1557.951364][ T3396] sp0: Synchronizing with TNC [ 1557.971710][ T3360] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1557.982522][ T28] audit: type=1326 audit(2000000098.092:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3389 comm="syz.0.12911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1558.016426][ T3394] [U] è [ 1558.019866][ T3360] BTRFS info (device loop2): using free space tree [ 1558.242148][ T3360] BTRFS info (device loop2): enabling ssd optimizations [ 1558.272103][ T3360] BTRFS info (device loop2): auto enabling async discard [ 1558.466640][ T3425] kAFS: unable to lookup cell '.,' [ 1558.554815][ T5868] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1558.623618][ T3428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12924'. [ 1558.637866][ T3426] loop4: detected capacity change from 0 to 4096 [ 1558.689489][ T3426] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1558.774864][ T5782] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (5782) [ 1559.172013][ T28] audit: type=1326 audit(2000000099.457:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.12930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1559.263927][ T28] audit: type=1326 audit(2000000099.485:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.12930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1559.344366][ T3447] loop4: detected capacity change from 0 to 1024 [ 1559.381984][ T3448] infiniband syz2: set active [ 1559.389056][ T3448] infiniband syz2: set active [ 1559.393955][ T28] audit: type=1326 audit(2000000099.494:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.12930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1559.394010][ T28] audit: type=1326 audit(2000000099.494:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.12930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1559.394057][ T28] audit: type=1326 audit(2000000099.494:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.12930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb8d8f749 code=0x7ffc0000 [ 1559.518319][ T3448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1559.539405][T32582] lo speed is unknown, defaulting to 1000 [ 1559.548399][T32583] lo speed is unknown, defaulting to 1000 [ 1560.018159][ T3464] netlink: zone id is out of range [ 1560.374301][ T3478] loop1: detected capacity change from 0 to 164 [ 1560.426514][ T3481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1560.439806][ T3482] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1560.481258][ T3478] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1560.530377][ T3484] x_tables: unsorted underflow at hook 2 [ 1560.861575][ T3497] [U] ^R [ 1561.546873][ T7383] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1561.776517][ T7383] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1561.800548][ T7383] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1561.829146][ T7383] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.852407][ T7383] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1561.862770][ T7383] usb 2-1: config 1 has no interface number 0 [ 1561.868950][ T7383] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1561.878698][ T7383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.904981][ T7383] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1562.120242][ T7383] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1562.141185][ T7383] snd_usb_pod 2-1:1.1: invalid control EP [ 1562.153718][ T7383] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1562.166545][ T7383] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1562.192626][ T7383] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 1562.343392][ T3523] loop2: detected capacity change from 0 to 32768 [ 1562.357584][ T3545] loop4: detected capacity change from 0 to 2048 [ 1562.379169][ T3545] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1562.392592][ T3523] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1562.402113][ T7383] usb 2-1: USB disconnect, device number 69 [ 1562.467962][ T3523] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1562.499816][ T3523] (syz.2.12968,3523,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 1562.540623][ T3523] (syz.2.12968,3523,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1562.555581][ T3523] (syz.2.12968,3523,0):ocfs2_mknod:298 ERROR: status = -2 [ 1562.573852][ T3523] (syz.2.12968,3523,0):ocfs2_mknod:502 ERROR: status = -2 [ 1562.610607][ T3523] (syz.2.12968,3523,0):ocfs2_create:676 ERROR: status = -2 [ 1562.618714][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1562.733242][ T5868] ocfs2: Unmounting device (7,2) on (node local) [ 1563.463411][ T3579] loop2: detected capacity change from 0 to 256 [ 1563.506894][ T3579] exfat: Deprecated parameter 'namecase' [ 1563.530251][ T3579] exfat: Deprecated parameter 'namecase' [ 1563.536400][ T3579] exfat: Deprecated parameter 'utf8' [ 1563.605018][ T3579] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d) [ 1564.473236][ T3615] SET target dimension over the limit! [ 1564.878320][ T3633] loop4: detected capacity change from 0 to 16 [ 1564.909091][ T3633] erofs: (device loop4): mounted with root inode @ nid 36. [ 1564.947862][ T3633] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 1564.999026][ T3633] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 1565.030708][ T28] audit: type=1800 audit(2000000104.864:143): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13023" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1565.228973][ T3641] loop0: detected capacity change from 0 to 8 [ 1565.252657][ T3641] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1565.290606][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop0 [ 1565.313270][ T3641] cramfs: Error -3 while decompressing! [ 1565.366481][ T3641] cramfs: ffffffff96fdd368(1306)->ffff8880580d8000(4096) [ 1565.394139][ T3641] cramfs: bad data blocksize 3221485966 [ 1565.407587][ T3641] cramfs: Error -3 while decompressing! [ 1565.413625][ T3641] cramfs: ffffffff96fdd368(1306)->ffff8880580d8000(4096) [ 1565.426685][ T28] audit: type=1800 audit(2000000105.224:144): pid=3641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13027" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1565.836231][ T3629] loop1: detected capacity change from 0 to 40427 [ 1565.871628][ T3629] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1565.879518][ T3629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1566.011159][ T3629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1566.021582][ T28] audit: type=1326 audit(2000000105.769:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.2.13037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x0 [ 1566.258005][ T3629] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1566.293663][ T3629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1566.446986][ T3629] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1566.953521][ T3694] misc userio: Invalid payload size [ 1567.110601][ T3700] netlink: 'syz.1.13047': attribute type 26 has an invalid length. [ 1567.592858][ T3716] raw_sendmsg: syz.0.13062 forgot to set AF_INET. Fix it! [ 1568.297862][T32583] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1568.346958][ T3748] loop2: detected capacity change from 0 to 256 [ 1568.365059][ T3748] exfat: Deprecated parameter 'namecase' [ 1568.423537][ T3748] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1568.515443][T32583] usb 5-1: Using ep0 maxpacket: 32 [ 1568.522980][T32583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.549177][T32583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.576657][T32583] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1568.623761][T32583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.657382][T32583] usb 5-1: config 0 descriptor?? [ 1568.668652][T32583] hub 5-1:0.0: USB hub found [ 1568.912816][T32583] hub 5-1:0.0: 1 port detected [ 1568.929877][ T3762] loop0: detected capacity change from 0 to 2048 [ 1569.004237][ T3762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1569.126176][T32583] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1569.133756][T32583] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1569.159378][T32583] usbhid 5-1:0.0: can't add hid device: -71 [ 1569.165456][T32583] usbhid: probe of 5-1:0.0 failed with error -71 [ 1569.165887][ T3775] netlink: 'syz.1.13089': attribute type 11 has an invalid length. [ 1569.207780][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.241727][T32583] usb 5-1: USB disconnect, device number 14 [ 1569.952943][ T3801] loop1: detected capacity change from 0 to 256 [ 1570.265998][ T3812] loop2: detected capacity change from 0 to 512 [ 1570.323639][ T3812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1570.387055][ T3812] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.13108: bg 0: block 384: padding at end of block bitmap is not set [ 1570.436168][ T3816] netlink: 'syz.0.13109': attribute type 13 has an invalid length. [ 1570.462356][ T3812] EXT4-fs (loop2): Remounting filesystem read-only [ 1570.484307][ T3812] EXT4-fs (loop2): 1 truncate cleaned up [ 1570.506202][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.618323][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13113'. [ 1570.682201][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13113'. [ 1570.704247][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.955379][ T3833] netlink: 180 bytes leftover after parsing attributes in process `syz.4.13118'. [ 1570.969964][ T3830] loop0: detected capacity change from 0 to 4096 [ 1571.055764][ T3837] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1571.428221][ T3848] syz.1.13124 uses old SIOCAX25GETINFO [ 1571.766771][T32582] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1571.975438][T32582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1571.999628][T32582] usb 3-1: not running at top speed; connect to a high speed hub [ 1572.007913][T32583] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1572.028970][T32582] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 1572.041908][T32582] usb 3-1: config 1 has no interface number 0 [ 1572.059110][T32582] usb 3-1: config 1 interface 138 has no altsetting 0 [ 1572.073159][T32582] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1572.082627][T32582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.090674][T32582] usb 3-1: Product: syz [ 1572.113515][T32582] usb 3-1: Manufacturer: syz [ 1572.118375][T32582] usb 3-1: SerialNumber: syz [ 1572.154334][ T3858] loop4: detected capacity change from 0 to 32768 [ 1572.165441][ T3858] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.13130 (3858) [ 1572.202820][ T3858] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1572.214919][ T3870] loop0: detected capacity change from 0 to 512 [ 1572.222748][ T3858] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1572.235989][T32583] usb 2-1: Using ep0 maxpacket: 32 [ 1572.239540][ T3870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1572.245113][ T3858] BTRFS info (device loop4): force zlib compression, level 3 [ 1572.256409][ T3858] BTRFS info (device loop4): turning off barriers [ 1572.256642][T32583] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.274877][ T3858] BTRFS info (device loop4): using free space tree [ 1572.285591][T32583] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1572.295403][T32583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.304635][T32583] usb 2-1: Product: syz [ 1572.306066][ T3870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1572.310141][T32583] usb 2-1: Manufacturer: syz [ 1572.323579][T32583] usb 2-1: SerialNumber: syz [ 1572.337399][ T3870] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1572.338406][T32583] usb 2-1: config 0 descriptor?? [ 1572.361909][ T3870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 1572.381341][ T3870] System zones: 0-1, 15-15, 18-18, 34-34 [ 1572.390696][ T3870] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1572.397444][T32582] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1572.402098][ T3870] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1572.414821][ T3870] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1572.418146][T32583] usb 2-1: bad CDC descriptors [ 1572.435208][ T3870] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1572.450893][ T3870] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.13136: bg 0: block 40: padding at end of block bitmap is not set [ 1572.466556][ T3870] EXT4-fs (loop0): Remounting filesystem read-only [ 1572.473676][ T3870] EXT4-fs (loop0): 1 truncate cleaned up [ 1572.479917][T32583] usb 2-1: unsupported MDLM descriptors [ 1572.480919][ T3870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1572.549776][T32582] usb 3-1: USB disconnect, device number 61 [ 1572.623496][ T3858] BTRFS info (device loop4): auto enabling async discard [ 1572.701060][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.761184][T17455] usb 2-1: USB disconnect, device number 70 [ 1572.852153][T27419] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1573.306478][ T3897] netlink: 'syz.0.13141': attribute type 4 has an invalid length. [ 1573.385410][ T3897] veth1_macvtap: left promiscuous mode [ 1573.917881][ T3918] ALSA: mixer_oss: invalid OSS volume '' [ 1573.956943][T17455] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1574.175356][T17455] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1574.185877][T17455] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 1574.194197][T17455] usb 5-1: config 6 has no interface number 0 [ 1574.229150][T17455] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1574.287833][T17455] usb 5-1: config 6 interface 200 has no altsetting 0 [ 1574.309234][T17455] usb 5-1: string descriptor 0 read error: -22 [ 1574.317919][T17455] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1574.350675][T17455] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1574.397023][T17455] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1574.599921][ T3937] ieee802154 phy1 wpan1: encryption failed: -22 [ 1574.648049][T17455] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1574.694182][T17455] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1574.702239][T17455] usb 5-1: media controller created [ 1574.823402][T17455] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1574.924509][T17455] dvb-usb: bulk message failed: -71 (6/0) [ 1574.963464][T17455] dvb-usb: bulk message failed: -71 (6/0) [ 1574.978276][T17455] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1575.030049][T17455] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87 [ 1575.084444][T17455] dvb-usb: schedule remote query interval to 150 msecs. [ 1575.099780][T17455] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1575.141947][T17455] usb 5-1: USB disconnect, device number 15 [ 1575.376881][T17455] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1575.675610][ T3969] cgroup: subsys name conflicts with all [ 1576.965997][ T4017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13201'. [ 1577.121650][ T4021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13202'. [ 1577.335875][ T4006] loop0: detected capacity change from 0 to 32768 [ 1577.360899][ T4029] loop2: detected capacity change from 0 to 1024 [ 1577.555471][T27543] hfsplus: b-tree write err: -5, ino 4 [ 1577.886832][ T4042] loop1: detected capacity change from 0 to 256 [ 1578.412555][ T4060] netlink: 'syz.1.13221': attribute type 7 has an invalid length. [ 1578.428446][ T4060] netlink: 'syz.1.13221': attribute type 8 has an invalid length. [ 1578.436913][ T4060] netlink: 'syz.1.13221': attribute type 15 has an invalid length. [ 1578.571304][ T4062] netlink: 'syz.2.13222': attribute type 3 has an invalid length. [ 1578.979081][ T4075] loop4: detected capacity change from 0 to 4096 [ 1579.035213][ T4075] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1579.046772][ T4075] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1579.085761][ T4075] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1579.147559][ T4075] ntfs: volume version 3.1. [ 1579.205393][ T4075] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1579.255801][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1580.064283][ T4110] loop4: detected capacity change from 0 to 4096 [ 1580.094709][ T4110] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1580.242035][ T4110] ntfs3: loop4: failed to convert "c46c" to cp950 [ 1580.840983][ T4138] bpf: Bad value for 'mode' [ 1581.170001][ T4130] loop2: detected capacity change from 0 to 32768 [ 1581.201257][ T4146] loop0: detected capacity change from 0 to 256 [ 1581.353537][ T4150] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13266'. [ 1582.090688][ T4173] sctp: [Deprecated]: syz.1.13279 (pid 4173) Use of int in max_burst socket option. [ 1582.090688][ T4173] Use struct sctp_assoc_value instead [ 1582.558174][ T4194] loop4: detected capacity change from 0 to 1024 [ 1582.604841][ T4194] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1582.675643][ T4200] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13289'. [ 1582.688303][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.701460][ T4200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13289'. [ 1582.721857][ T4194] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1582.745634][ T5859] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1582.833633][T27419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.971162][ T5859] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1582.978491][ T4209] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1582.989429][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.005460][ T5859] usb 2-1: Product: syz [ 1583.012862][ T5859] usb 2-1: Manufacturer: syz [ 1583.023709][ T5859] usb 2-1: SerialNumber: syz [ 1583.046291][ T5859] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1583.074692][ T27] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1583.388170][ C1] usb 2-1: ath: unknown panic pattern! [ 1583.580768][ T4218] loop4: detected capacity change from 0 to 1764 [ 1583.658585][ T7383] usb 2-1: USB disconnect, device number 71 [ 1583.789491][ T4211] loop0: detected capacity change from 0 to 32768 [ 1583.822793][ T4207] loop2: detected capacity change from 0 to 32768 [ 1583.835859][ T4211] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1583.868894][ T4211] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 1583.895034][ T4211] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1583.905125][ T4211] OCFS2: Returning error to the calling process. [ 1583.911624][ T4211] (syz.0.13293,4211,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1583.919614][ T4211] (syz.0.13293,4211,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1583.928419][ T4211] (syz.0.13293,4211,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 1583.936487][ T4211] (syz.0.13293,4211,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1583.945493][ T4211] (syz.0.13293,4211,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 1583.956810][ T4211] (syz.0.13293,4211,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1583.965014][ T4211] (syz.0.13293,4211,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1583.973579][ T4211] (syz.0.13293,4211,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1583.982921][ T4211] (syz.0.13293,4211,1):ocfs2_mknod:298 ERROR: status = -5 [ 1583.990497][ T4211] (syz.0.13293,4211,1):ocfs2_mknod:502 ERROR: status = -5 [ 1583.998104][ T4211] (syz.0.13293,4211,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1584.081668][ T12] read_mapping_page failed! [ 1584.088599][ T5865] ocfs2: Unmounting device (7,0) on (node local) [ 1584.105305][ T12] ERROR: (device loop2): txCommit: [ 1584.105305][ T12] [ 1584.155548][ T12] jfs_write_inode: jfs_commit_inode failed! [ 1584.292265][ T27] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1584.338974][ T27] ath9k_htc: Failed to initialize the device [ 1584.347123][ T7383] usb 2-1: ath9k_htc: USB layer deinitialized [ 1585.071796][ T4254] bad cache= option: no%e [ 1585.071796][ T4254] [ 1585.152091][ T4254] CIFS: VFS: bad cache= option: no%e [ 1585.496909][ T4268] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1585.511615][ T4270] loop2: detected capacity change from 0 to 164 [ 1585.541994][ T4268] overlayfs: missing 'lowerdir' [ 1585.569398][ T4270] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1585.972155][ T4288] loop1: detected capacity change from 0 to 64 [ 1586.056309][ T4288] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1586.076686][ T4288] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 1586.174507][ T4292] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1586.244520][ T4294] loop0: detected capacity change from 0 to 256 [ 1586.679465][ T28] audit: type=1326 audit(2000000124.832:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1586.760513][ T28] audit: type=1326 audit(2000000124.832:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1586.854162][ T28] audit: type=1326 audit(2000000124.841:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1586.956495][ T28] audit: type=1326 audit(2000000124.841:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1587.009844][ T28] audit: type=1326 audit(2000000124.841:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318f749 code=0x7ffc0000 [ 1587.141530][ T4324] loop2: detected capacity change from 0 to 512 [ 1587.191152][ T4324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1587.290013][ T4324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.308209][ T4324] ext4 filesystem being mounted at /3412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.507006][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.561154][ T4341] smb3: Unexpected value for 'rdma' [ 1588.916650][ T4367] loop1: detected capacity change from 0 to 32768 [ 1588.928077][ T4367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.13368 (4367) [ 1588.963618][ T4367] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1588.998009][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13382'. [ 1589.002441][ T4367] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1589.026932][ T4367] BTRFS info (device loop1): using free space tree [ 1589.231594][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13385'. [ 1589.292803][ T4367] BTRFS info (device loop1): enabling ssd optimizations [ 1589.299847][ T4367] BTRFS info (device loop1): auto enabling async discard [ 1589.508146][T23168] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1589.545987][ T5866] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1589.605915][ T4425] netlink: 'syz.4.13390': attribute type 5 has an invalid length. [ 1589.718166][ T4425] : entered promiscuous mode [ 1589.739410][T23168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1589.768672][T23168] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1589.804626][ T5782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5782) [ 1589.816368][T23168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1589.816404][T23168] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1589.819558][T23168] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1589.902720][T23168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.926323][T23168] usb 3-1: Product: syz [ 1589.930585][T23168] usb 3-1: Manufacturer: syz [ 1590.000081][T23168] usb 3-1: SerialNumber: syz [ 1590.017238][T23168] usb 3-1: config 0 descriptor?? [ 1590.049125][T23168] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1590.307689][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1590.338691][T23168] scsi host1: usb-storage 3-1:0.0 [ 1590.401560][T23168] usb 3-1: USB disconnect, device number 62 [ 1590.674685][ T4455] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.13402'. [ 1590.685578][ T4455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1590.904325][ T4459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13404'. [ 1591.364797][ T4447] loop0: detected capacity change from 0 to 32768 [ 1591.577433][ T12] read_mapping_page failed! [ 1591.582382][ T12] ERROR: (device loop0): txCommit: [ 1591.582382][ T12] [ 1591.633339][ T12] jfs_write_inode: jfs_commit_inode failed! [ 1591.686229][ T4477] netlink: 'syz.2.13413': attribute type 5 has an invalid length. [ 1591.712966][ T4477] : entered promiscuous mode [ 1592.385418][ T4493] loop1: detected capacity change from 0 to 4096 [ 1592.417276][ T4493] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1592.574996][ T4493] ntfs3: loop1: failed to convert "c46c" to koi8-r [ 1592.604872][ T4499] xt_ecn: cannot match TCP bits for non-tcp packets [ 1592.950662][ T4461] loop4: detected capacity change from 0 to 40435 [ 1592.989102][ T4510] ieee802154 phy1 wpan1: encryption failed: -22 [ 1592.997252][ T4461] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (16843008) [ 1593.030925][ T4461] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1593.039291][ T4461] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 1593.277772][ T4519] loop0: detected capacity change from 0 to 8 [ 1593.446034][ T4519] SQUASHFS error: xz decompression failed, data probably corrupt [ 1593.508332][ T4519] SQUASHFS error: Failed to read block 0xa8: -5 [ 1593.570204][ T4519] SQUASHFS error: xz decompression failed, data probably corrupt [ 1593.617053][ T4519] SQUASHFS error: Failed to read block 0xa8: -5 [ 1593.623694][ T28] audit: type=1800 audit(2000000131.244:151): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13433" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 1593.702756][ T4525] loop4: detected capacity change from 0 to 4096 [ 1593.729384][ T4525] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1593.767474][ T4525] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1593.825965][ T4525] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1593.851108][ T4525] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1593.877180][ T4525] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1593.917737][ T4525] ntfs: volume version 3.1. [ 1593.925271][ T4525] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1593.954253][ T4525] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1593.988858][ T4525] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1594.034177][ T4525] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1594.266605][ T4541] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1594.424091][ T4548] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1594.745671][ T4560] netlink: 'syz.1.13454': attribute type 30 has an invalid length. [ 1595.252299][T32582] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1595.423860][ T4587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13467'. [ 1595.449021][ T4589] bond0: Unable to set up delay as MII monitoring is disabled [ 1595.460095][T32582] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1595.479460][T32582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.513869][T32582] usb 2-1: config 0 has no interface number 0 [ 1595.520060][T32582] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 1595.560316][ T4585] loop4: detected capacity change from 0 to 4096 [ 1595.577492][T32582] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1595.598991][T32582] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 1595.632269][T32582] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1595.656904][T32582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.672054][ T4585] ntfs: volume version 3.1. [ 1595.694413][T32582] usb 2-1: Product: syz [ 1595.718564][T32582] usb 2-1: Manufacturer: syz [ 1595.725466][T32582] usb 2-1: SerialNumber: syz [ 1595.746649][T32582] usb 2-1: config 0 descriptor?? [ 1595.780644][T32582] HFC-S_USB: probe of 2-1:0.117 failed with error -5 [ 1595.917392][ T4599] loop0: detected capacity change from 0 to 256 [ 1596.048261][ T4599] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1596.061993][ T4601] loop2: detected capacity change from 0 to 256 [ 1596.076078][ T4599] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1596.124215][ T27] usb 2-1: USB disconnect, device number 72 [ 1596.871915][ T4627] IPv6: Can't replace route, no match found [ 1596.944874][ T4630] loop2: detected capacity change from 0 to 8 [ 1597.128722][ T4630] SQUASHFS error: xz decompression failed, data probably corrupt [ 1597.148836][ T4630] SQUASHFS error: Failed to read block 0xa8: -5 [ 1597.203886][ T4630] SQUASHFS error: xz decompression failed, data probably corrupt [ 1597.235637][ T4630] SQUASHFS error: Failed to read block 0xa8: -5 [ 1597.742467][ T4623] loop0: detected capacity change from 0 to 32768 [ 1597.963963][ T4654] loop1: detected capacity change from 0 to 4096 [ 1598.036022][ T4654] ntfs: volume version 3.1. [ 1599.200587][ T4693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1599.233261][ T4694] xt_TCPMSS: Only works on TCP SYN packets [ 1599.386934][ T4698] loop0: detected capacity change from 0 to 128 [ 1599.409940][ T4698] sysv_free_block: flc_count > flc_size [ 1599.432674][ T4698] sysv_free_block: flc_count > flc_size [ 1599.454732][ T4698] sysv_free_block: flc_count > flc_size [ 1599.486757][ T4698] sysv_free_block: flc_count > flc_size [ 1599.498745][ T4698] sysv_free_block: flc_count > flc_size [ 1599.505778][ T4698] sysv_free_block: flc_count > flc_size [ 1599.511863][ T4698] sysv_free_block: flc_count > flc_size [ 1599.517554][ T4698] sysv_free_block: flc_count > flc_size [ 1599.523635][ T4698] sysv_free_block: flc_count > flc_size [ 1599.529349][ T4698] sysv_free_block: flc_count > flc_size [ 1599.544939][ T4698] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1599.546812][ T4662] loop2: detected capacity change from 0 to 32768 [ 1599.614274][ T4662] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1599.640710][ T4662] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1599.646842][ T4706] loop1: detected capacity change from 0 to 8 [ 1599.808608][ T4662] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1599.860352][T32582] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1599.897023][T32582] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1600.087738][T32582] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 175ms [ 1600.087951][T32582] gfs2: fsid=syz:syz.0: jid=0: Done [ 1600.087994][ T4662] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1600.628443][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13537'. [ 1601.096555][ T4743] loop4: detected capacity change from 0 to 4096 [ 1601.117577][ T4743] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1601.246616][ T4754] tipc: Can't bind to reserved service type 2 [ 1601.292041][ T4743] ntfs3: loop4: failed to convert "c46c" to cp437 [ 1601.968522][ T4780] loop2: detected capacity change from 0 to 8 [ 1602.344847][ T4784] loop0: detected capacity change from 0 to 4096 [ 1602.384550][ T4784] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1602.603877][ T4784] ntfs3: loop0: failed to convert "c46c" to cp437 [ 1602.639570][ T4798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13569'. [ 1602.907850][ T4809] loop4: detected capacity change from 0 to 1764 [ 1602.969492][ T4809] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1603.208871][ T4817] loop2: detected capacity change from 0 to 164 [ 1603.256910][ T4817] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1603.652126][ T4829] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13582'. [ 1603.738445][ T4832] QAT: Invalid ioctl 1076910120 [ 1603.921277][ T4835] loop0: detected capacity change from 0 to 512 [ 1603.962169][ T4835] EXT4-fs: Ignoring removed bh option [ 1603.979476][ T4835] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1604.001688][ T4835] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1604.072556][ T4835] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1604.134080][ T4835] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1604.151615][ T4835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.380649][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.624207][ T4860] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13599'. [ 1605.422595][ T4891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1605.808874][ T4909] netlink: 'syz.1.13621': attribute type 21 has an invalid length. [ 1605.816986][ T4909] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13621'. [ 1606.250845][ T4925] loop0: detected capacity change from 0 to 2048 [ 1606.293748][ T4925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1606.352004][ T4931] overlay: Unknown parameter '\' [ 1606.790983][ T4946] loop0: detected capacity change from 0 to 512 [ 1606.818656][ T4949] xt_CONNSECMARK: invalid mode: 0 [ 1606.859228][ T4946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 1606.873697][ T4946] System zones: 0-2, 18-18, 34-34 [ 1606.879402][ T4946] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1606.936721][ T4946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.13642: bg 0: block 248: padding at end of block bitmap is not set [ 1606.989738][ T4946] __quota_error: 25 callbacks suppressed [ 1606.989763][ T4946] Quota error (device loop0): write_blk: dquota write failed [ 1607.022848][ T4946] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1607.039791][ T4946] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.13642: Failed to acquire dquot type 1 [ 1607.054117][ T4946] EXT4-fs (loop0): 1 orphan inode deleted [ 1607.062996][ T3496] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 1607.087127][ T3496] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u4:11: Failed to release dquot type 1 [ 1607.175382][ T4946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1607.294946][ T4946] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.13642: deleted inode referenced: 12 [ 1607.465474][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.595375][ T4975] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13656'. [ 1607.623092][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13656'. [ 1607.649257][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13656'. [ 1608.095233][T23168] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1608.220113][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13666'. [ 1608.258169][ T4968] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1608.302116][T23168] usb 2-1: Using ep0 maxpacket: 32 [ 1608.331210][T23168] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1608.351683][T23168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.381311][T23168] usb 2-1: Product: syz [ 1608.385549][T23168] usb 2-1: Manufacturer: syz [ 1608.403628][T23168] usb 2-1: SerialNumber: syz [ 1608.432789][T23168] usb 2-1: config 0 descriptor?? [ 1608.680843][T23168] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 1608.700660][T23168] eb 9a 47 80 9b f8 7a f0 [ 1608.705417][T23168] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 1608.763623][ T5012] loop4: detected capacity change from 0 to 512 [ 1608.776864][ T5012] EXT4-fs: Ignoring removed orlov option [ 1608.796188][ T5012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1608.805438][T32582] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1608.817398][ T5012] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1608.827781][ T5012] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.13673: bg 0: block 248: padding at end of block bitmap is not set [ 1608.854172][ T5012] Quota error (device loop4): write_blk: dquota write failed [ 1608.861715][ T5012] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1608.872800][ T5012] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13673: Failed to acquire dquot type 1 [ 1608.892208][ T5012] EXT4-fs (loop4): 1 truncate cleaned up [ 1608.912107][ T5012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1608.928719][T23168] usb 2-1: USB disconnect, device number 73 [ 1608.957077][ T5012] EXT4-fs: Ignoring removed orlov option [ 1608.963389][ T5012] EXT4-fs: can't change dax mount option while remounting [ 1609.002334][T27419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.011625][T32582] usb 3-1: Using ep0 maxpacket: 8 [ 1609.026932][T32582] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1609.040788][T32582] usb 3-1: config 179 has no interface number 0 [ 1609.047309][T32582] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1609.059201][T32582] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1609.093733][T32582] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1609.134075][T32582] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1609.172229][T32582] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1609.186110][ T5017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13675'. [ 1609.207943][T32582] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1609.222791][T32582] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1609.253051][T32582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.306207][T32582] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input89 [ 1609.395888][ T5145] input input89: unable to receive magic message: -110 [ 1609.437208][ T5145] input input89: unable to receive magic message: -32 [ 1609.475037][ T5145] input input89: unable to receive magic message: -32 [ 1609.615383][ T5145] input input89: unable to receive magic message: -32 [ 1609.681458][ T5145] input input89: unable to receive magic message: -32 [ 1609.692181][ T5031] SET target dimension over the limit! [ 1609.858991][ T5033] ipt_ECN: cannot use operation on non-tcp rule [ 1609.868679][T32582] usb 3-1: USB disconnect, device number 63 [ 1609.874868][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1609.909711][T32582] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1609.992681][ T5037] loop0: detected capacity change from 0 to 2048 [ 1610.066541][ T5037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1611.170095][ T5081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13707'. [ 1611.563126][T32583] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1611.783986][T32583] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 1611.803951][ T5110] openvswitch: netlink: Actions may not be safe on all matching packets [ 1611.805082][T32583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.855583][T32583] usb 5-1: config 0 has no interface number 0 [ 1611.870832][ T5112] loop0: detected capacity change from 0 to 512 [ 1611.888862][T32583] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1611.897989][T32583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.911264][ T5112] EXT4-fs: Ignoring removed orlov option [ 1611.943587][ T5112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1611.947443][T32583] usb 5-1: config 0 descriptor?? [ 1611.988708][T32583] ttusbir 5-1:0.83: cannot find expected altsetting [ 1612.009648][ T5112] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1612.033463][ T5112] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.13720: bg 0: block 248: padding at end of block bitmap is not set [ 1612.108466][ T5112] Quota error (device loop0): write_blk: dquota write failed [ 1612.135600][ T5097] loop2: detected capacity change from 0 to 32768 [ 1612.148333][ T5097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.13714 (5097) [ 1612.150932][ T5112] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1612.174093][ T5097] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1612.200599][ T5097] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1612.211577][ T5112] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.13720: Failed to acquire dquot type 1 [ 1612.226240][ T5112] EXT4-fs (loop0): 1 truncate cleaned up [ 1612.239666][ T5112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1612.265494][ T5097] BTRFS info (device loop2): enabling auto defrag [ 1612.288216][ T5097] BTRFS info (device loop2): turning on sync discard [ 1612.297562][T32583] usb 5-1: USB disconnect, device number 16 [ 1612.332778][ T5097] BTRFS info (device loop2): force zlib compression, level 3 [ 1612.352154][ T5097] BTRFS info (device loop2): force clearing of disk cache [ 1612.388265][ T5097] BTRFS info (device loop2): max_inline at 0 [ 1612.392738][ T5112] EXT4-fs: Ignoring removed orlov option [ 1612.401307][ T5097] BTRFS info (device loop2): disabling free space tree [ 1612.409676][ T5112] EXT4-fs: can't change dax mount option while remounting [ 1612.487011][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.662444][ T5097] BTRFS info (device loop2): enabling ssd optimizations [ 1612.702485][ T5097] BTRFS info (device loop2): rebuilding free space tree [ 1612.754055][ T5097] BTRFS info (device loop2): disabling free space tree [ 1612.775382][ T5097] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1612.799822][ T5097] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1612.903702][ T5150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1613.116575][ T5868] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1613.475346][ T5169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13736'. [ 1613.514119][ T5169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13736'. [ 1613.552059][ T5169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13736'. [ 1613.601764][ T5165] loop0: detected capacity change from 0 to 4096 [ 1613.709464][ T5174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1614.006471][ T5183] loop2: detected capacity change from 0 to 256 [ 1614.058988][ T5183] exfat: Deprecated parameter 'namecase' [ 1614.064746][ T5183] exfat: Deprecated parameter 'utf8' [ 1614.137651][ T5183] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 1614.453449][ T5192] loop1: detected capacity change from 0 to 2048 [ 1614.489962][ T28] audit: type=1326 audit(2000000150.483:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.2.13747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1614.525847][ T28] audit: type=1326 audit(2000000150.492:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.2.13747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1614.585104][ T5192] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1614.642923][ T28] audit: type=1326 audit(2000000150.510:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.2.13747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1614.701476][ T5201] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1614.702010][ T5192] syz.1.13745: attempt to access beyond end of device [ 1614.702010][ T5192] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1614.734316][ T28] audit: type=1326 audit(2000000150.510:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.2.13747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1614.789474][ T5204] netlink: 'syz.2.13750': attribute type 24 has an invalid length. [ 1614.828649][ T28] audit: type=1326 audit(2000000150.510:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.2.13747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52498f749 code=0x7ffc0000 [ 1614.957021][ T5192] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1615.006556][ T5192] Remounting filesystem read-only [ 1615.036953][ T5192] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1615.088716][ T5192] NILFS (loop1): error -5 truncating bmap (ino=16) [ 1615.287064][ T5866] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1615.313417][ T5866] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 1615.321085][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13758'. [ 1615.337855][ T5866] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1615.382444][ T5866] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1615.405080][ T5866] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1615.451853][ T5866] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1615.521619][ T5227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13763'. [ 1615.692638][ T5233] netlink: 'syz.4.13765': attribute type 8 has an invalid length. [ 1616.003883][ T5237] loop2: detected capacity change from 0 to 4096 [ 1616.074392][ T5237] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1616.101611][ T5237] ntfs3: loop2: Failed to load $Extend (-22). [ 1616.121753][ T5237] ntfs3: loop2: Failed to initialize $Extend. [ 1616.181080][ T5247] ceph: No source [ 1616.199355][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13773'. [ 1617.491429][ T5303] cgroup: Invalid name [ 1617.941755][ T5323] loop0: detected capacity change from 0 to 512 [ 1618.004370][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.075070][ T5323] ext4 filesystem being mounted at /3393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.368150][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.313270][ T5379] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13833'. [ 1619.333671][ T5379] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1619.395637][ T5383] netlink: 'syz.0.13835': attribute type 75 has an invalid length. [ 1619.713048][ T5393] netlink: 'syz.4.13840': attribute type 12 has an invalid length. [ 1619.917905][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13844'. [ 1619.951424][ T5401] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13844'. [ 1619.998552][ T5405] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13846'. [ 1620.345523][ T5417] loop4: detected capacity change from 0 to 8 [ 1620.414101][ T5417] SQUASHFS error: Unable to read directory block [1d0:0] [ 1621.039083][ T5444] loop1: detected capacity change from 0 to 1024 [ 1621.062886][ T5444] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1621.143792][T32583] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1621.355981][T32583] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1621.373706][T32583] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.396477][T32583] usb 5-1: config 220 has no interface number 2 [ 1621.410592][T32583] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1621.434282][T32583] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1621.441578][T32583] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1621.448691][T32583] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1621.458944][T32583] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1621.468214][T32583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.482810][T32583] usb 5-1: Product: syz [ 1621.490553][T32583] usb 5-1: Manufacturer: syz [ 1621.500056][T32583] usb 5-1: SerialNumber: syz [ 1621.749451][T32583] usb 5-1: selecting invalid altsetting 0 [ 1621.786872][T32583] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1621.804996][T32583] usb 5-1: No valid video chain found. [ 1621.810685][ T5458] loop1: detected capacity change from 0 to 32768 [ 1621.825397][T32583] usb 5-1: selecting invalid altsetting 0 [ 1621.835075][T32583] usbtest: probe of 5-1:220.1 failed with error -22 [ 1621.846803][T32583] usb 5-1: USB disconnect, device number 17 [ 1621.898335][ T5458] ------------[ cut here ]------------ [ 1621.904135][ T5458] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1621.919426][ T5458] WARNING: CPU: 0 PID: 5458 at kernel/locking/mutex.c:582 __mutex_lock+0xb8c/0xcc0 [ 1621.935292][ T5458] Modules linked in: [ 1621.939229][ T5458] CPU: 0 PID: 5458 Comm: syz.1.13869 Not tainted syzkaller #0 [ 1621.947157][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1621.957590][ T5458] RIP: 0010:__mutex_lock+0xb8c/0xcc0 [ 1621.963842][ T5458] Code: 04 08 84 c0 0f 85 20 01 00 00 83 3d dd 49 d3 03 00 0f 85 81 f5 ff ff 48 c7 c7 80 a7 aa 8a 48 c7 c6 20 a8 aa 8a e8 94 94 d8 f6 <0f> 0b e9 67 f5 ff ff 0f 0b e9 47 f9 ff ff 0f 0b e9 ff f5 ff ff 48 [ 1621.984108][ T5458] RSP: 0018:ffffc900174c79a0 EFLAGS: 00010246 [ 1621.990405][ T5458] RAX: aad9148d22f08500 RBX: ffff888031697628 RCX: 0000000000080000 [ 1621.998418][ T5458] RDX: ffffc9000d34a000 RSI: 0000000000007403 RDI: 0000000000007404 [ 1622.006493][ T5458] RBP: ffffc900174c7b00 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1622.014661][ T5458] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 1622.022757][ T5458] R13: 1ffff92002e98f44 R14: dffffc0000000000 R15: 0000000000000000 [ 1622.030787][ T5458] FS: 00007fbd5cc116c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1622.039816][ T5458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1622.046497][ T5458] CR2: 00007f7a127970d6 CR3: 000000004e6bd000 CR4: 00000000003506f0 [ 1622.054607][ T5458] Call Trace: [ 1622.057929][ T5458] [ 1622.060901][ T5458] ? reiserfs_write_lock+0x79/0xd0 [ 1622.066131][ T5458] ? mutex_lock_nested+0x20/0x20 [ 1622.071133][ T5458] ? verify_lock_unused+0x140/0x140 [ 1622.077036][ T5458] ? mod_objcg_state+0x50b/0x890 [ 1622.082079][ T5458] reiserfs_write_lock+0x79/0xd0 [ 1622.087210][ T5458] reiserfs_lookup+0x151/0x520 [ 1622.092024][ T5458] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1622.097853][ T5458] ? d_alloc+0x1eb/0x250 [ 1622.102185][ T5458] ? do_raw_spin_unlock+0x121/0x230 [ 1622.107509][ T5458] ? _raw_spin_unlock+0x28/0x40 [ 1622.112460][ T5458] ? d_alloc+0x1eb/0x250 [ 1622.116766][ T5458] lookup_one_qstr_excl+0x112/0x250 [ 1622.122082][ T5458] filename_create+0x222/0x460 [ 1622.126913][ T5458] ? kern_path_create+0x50/0x50 [ 1622.131868][ T5458] ? __virt_addr_valid+0x18c/0x540 [ 1622.137021][ T5458] ? __virt_addr_valid+0x469/0x540 [ 1622.142218][ T5458] do_mkdirat+0xa1/0x440 [ 1622.146506][ T5458] ? vfs_mkdir+0x440/0x440 [ 1622.150962][ T5458] __x64_sys_mkdirat+0x89/0xa0 [ 1622.155824][ T5458] do_syscall_64+0x55/0xb0 [ 1622.160282][ T5458] ? clear_bhb_loop+0x40/0x90 [ 1622.165013][ T5458] ? clear_bhb_loop+0x40/0x90 [ 1622.169718][ T5458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1622.175739][ T5458] RIP: 0033:0x7fbd5bd8de97 [ 1622.180185][ T5458] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.200408][ T5458] RSP: 002b:00007fbd5cc10e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1622.209148][ T5458] RAX: ffffffffffffffda RBX: 00007fbd5cc10ef0 RCX: 00007fbd5bd8de97 [ 1622.217246][ T5458] RDX: 00000000000001ff RSI: 0000200000002080 RDI: 00000000ffffff9c [ 1622.225368][ T5458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1622.233415][ T5458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002080 [ 1622.241558][ T5458] R13: 00007fbd5cc10eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1622.249703][ T5458] [ 1622.252750][ T5458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1622.260048][ T5458] CPU: 0 PID: 5458 Comm: syz.1.13869 Not tainted syzkaller #0 [ 1622.267596][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1622.277660][ T5458] Call Trace: [ 1622.280954][ T5458] [ 1622.283888][ T5458] dump_stack_lvl+0x16c/0x230 [ 1622.288580][ T5458] ? show_regs_print_info+0x20/0x20 [ 1622.293796][ T5458] ? load_image+0x3b0/0x3b0 [ 1622.298311][ T5458] panic+0x2c0/0x710 [ 1622.302214][ T5458] ? bpf_jit_dump+0xd0/0xd0 [ 1622.306726][ T5458] __warn+0x2e0/0x470 [ 1622.310719][ T5458] ? __mutex_lock+0xb8c/0xcc0 [ 1622.315435][ T5458] ? __mutex_lock+0xb8c/0xcc0 [ 1622.320144][ T5458] report_bug+0x2be/0x4f0 [ 1622.324575][ T5458] ? __mutex_lock+0xb8c/0xcc0 [ 1622.329262][ T5458] ? __mutex_lock+0xb8c/0xcc0 [ 1622.333952][ T5458] ? __mutex_lock+0xb8e/0xcc0 [ 1622.338640][ T5458] handle_bug+0xcf/0x120 [ 1622.342899][ T5458] exc_invalid_op+0x1a/0x50 [ 1622.347429][ T5458] asm_exc_invalid_op+0x1a/0x20 [ 1622.352299][ T5458] RIP: 0010:__mutex_lock+0xb8c/0xcc0 [ 1622.357612][ T5458] Code: 04 08 84 c0 0f 85 20 01 00 00 83 3d dd 49 d3 03 00 0f 85 81 f5 ff ff 48 c7 c7 80 a7 aa 8a 48 c7 c6 20 a8 aa 8a e8 94 94 d8 f6 <0f> 0b e9 67 f5 ff ff 0f 0b e9 47 f9 ff ff 0f 0b e9 ff f5 ff ff 48 [ 1622.377322][ T5458] RSP: 0018:ffffc900174c79a0 EFLAGS: 00010246 [ 1622.383406][ T5458] RAX: aad9148d22f08500 RBX: ffff888031697628 RCX: 0000000000080000 [ 1622.391391][ T5458] RDX: ffffc9000d34a000 RSI: 0000000000007403 RDI: 0000000000007404 [ 1622.399371][ T5458] RBP: ffffc900174c7b00 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1622.407352][ T5458] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 1622.415336][ T5458] R13: 1ffff92002e98f44 R14: dffffc0000000000 R15: 0000000000000000 [ 1622.423333][ T5458] ? reiserfs_write_lock+0x79/0xd0 [ 1622.428487][ T5458] ? mutex_lock_nested+0x20/0x20 [ 1622.433445][ T5458] ? verify_lock_unused+0x140/0x140 [ 1622.438653][ T5458] ? mod_objcg_state+0x50b/0x890 [ 1622.443603][ T5458] reiserfs_write_lock+0x79/0xd0 [ 1622.448557][ T5458] reiserfs_lookup+0x151/0x520 [ 1622.453331][ T5458] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1622.459065][ T5458] ? d_alloc+0x1eb/0x250 [ 1622.463340][ T5458] ? do_raw_spin_unlock+0x121/0x230 [ 1622.468574][ T5458] ? _raw_spin_unlock+0x28/0x40 [ 1622.473432][ T5458] ? d_alloc+0x1eb/0x250 [ 1622.477692][ T5458] lookup_one_qstr_excl+0x112/0x250 [ 1622.482914][ T5458] filename_create+0x222/0x460 [ 1622.487786][ T5458] ? kern_path_create+0x50/0x50 [ 1622.492656][ T5458] ? __virt_addr_valid+0x18c/0x540 [ 1622.497778][ T5458] ? __virt_addr_valid+0x469/0x540 [ 1622.502903][ T5458] do_mkdirat+0xa1/0x440 [ 1622.507164][ T5458] ? vfs_mkdir+0x440/0x440 [ 1622.511775][ T5458] __x64_sys_mkdirat+0x89/0xa0 [ 1622.516562][ T5458] do_syscall_64+0x55/0xb0 [ 1622.520997][ T5458] ? clear_bhb_loop+0x40/0x90 [ 1622.525687][ T5458] ? clear_bhb_loop+0x40/0x90 [ 1622.530375][ T5458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1622.536281][ T5458] RIP: 0033:0x7fbd5bd8de97 [ 1622.540707][ T5458] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.560342][ T5458] RSP: 002b:00007fbd5cc10e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1622.568765][ T5458] RAX: ffffffffffffffda RBX: 00007fbd5cc10ef0 RCX: 00007fbd5bd8de97 [ 1622.576759][ T5458] RDX: 00000000000001ff RSI: 0000200000002080 RDI: 00000000ffffff9c [ 1622.584745][ T5458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1622.592741][ T5458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002080 [ 1622.600720][ T5458] R13: 00007fbd5cc10eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1622.608739][ T5458] [ 1622.612106][ T5458] Kernel Offset: disabled [ 1622.616437][ T5458] Rebooting in 86400 seconds..